The version of Google Chrome installed on the remote Windows host is prior to 92.0.4515.107. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_07_stable-channel-update-for-desktop_20 advisory.

  - Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-30588)

  - Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker     who convinced a user to install a malicious extension to potentially perform a sandbox escape via a     crafted HTML page. (CVE-2021-30571)

  - Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an     attacker who convinced a user to install a malicious extension to perform an out of bounds memory write     via a crafted HTML page. (CVE-2021-30565)

  - Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who     had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.
    (CVE-2021-30566)

  - Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a     user to open DevTools to potentially exploit heap corruption via specific user gesture. (CVE-2021-30567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 92.0.4515.107 Multiple Vulnerabilities

critical Nessus Plugin ID 151831

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin Feed: 202511242208
Version 1.11 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.10 Dec 7, 2023, 3:25 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202312071525